CVE-2014-3467

Key facts

CVSS score

5.0 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS score

6.8% (94th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2014-3479)

Published

June 5, 2014

NVD last modified

June 17, 2026

Status

Modified

Affected products

• debian / debian linux
• f5 / arx
• f5 / arx firmware
• gnu / gnutls
• gnu / libtasn1
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• redhat / virtualization
• suse / linux enterprise desktop
• suse / linux enterprise high availability extension
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise software development kit

Certified products that may be affected

4 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 7.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11039-2020 - archived
• SUSE Linux Enterprise Server 11 Service Pack 2 on IBM System z - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0852-2013 - archived
• SUSE Linux Enterprise Server 11 Service Pack 2 including KVM virtualization - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0787-2013 - archived
• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical

References

• http://advisories.mageia.org/MGASA-2014-0247.html(Third Party Advisory)
• http://linux.oracle.com/errata/ELSA-2014-0594.html(Third Party Advisory)
• http://linux.oracle.com/errata/ELSA-2014-0596.html(Third Party Advisory)
• http://lists.gnu.org/archive/html/help-libtasn1/2014-05/msg00006.html(Patch, Vendor Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html(Mailing List, Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2014-0594.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2014-0596.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2014-0687.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2014-0815.html(Third Party Advisory)
• http://secunia.com/advisories/58591(Third Party Advisory)
• http://secunia.com/advisories/58614(Third Party Advisory)
• http://secunia.com/advisories/59021(Third Party Advisory)
• http://secunia.com/advisories/59057(Third Party Advisory)
• http://secunia.com/advisories/59408(Third Party Advisory)
• http://secunia.com/advisories/60320(Third Party Advisory)
• http://secunia.com/advisories/60415(Third Party Advisory)
• http://secunia.com/advisories/61888(Third Party Advisory)
• http://support.f5.com/kb/en-us/solutions/public/15000/400/sol15423.html(Third Party Advisory)
• http://www.debian.org/security/2014/dsa-3056(Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:116(Third Party Advisory)
• http://www.novell.com/support/kb/doc.php?id=7015302(Third Party Advisory)
• http://www.novell.com/support/kb/doc.php?id=7015303(Third Party Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=1102022(Issue Tracking, Patch, Third Party Advisory)